doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerability to delete arbitrary files.
References
Link | Resource |
---|---|
https://github.com/itodaro/doorGets_cve | Exploit Third Party Advisory |
Configurations
History
No history.
Information
Published : 2019-04-30 20:29
Updated : 2020-08-24 17:37
NVD link : CVE-2019-11612
Mitre link : CVE-2019-11612
CVE.ORG link : CVE-2019-11612
JSON object : View
Products Affected
doorgets
- doorgets_cms
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')